{"vulnerability": "CVE-2026-67854", "sightings": [{"uuid": "05df964f-367d-4588-89d6-b95e1806abcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67854", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtenadx26z25", "content": "CVE-2026-67854\nA security weakness in Qcms v.6.0.6 allows an attacker to run malicious code on the system, potentially leading to data theft or system compromise. To protect your system, update Qcms to the latest version as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-18T16:30:06.170148Z"}, {"uuid": "61668a48-5aad-436b-a10e-86367291b20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67854", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtd2xndomb2w", "content": "CRITICAL SQL Injection in Qcms v6.0.6 (CVE-2026-67854) enables remote code execution. No patch yet \u2014 restrict access and monitor for suspicious queries. https://radar.offseq.com/threat/sql-injection-vulnerability-in-qcms-v606-allows-a-remote-attacker-to-execute-arbitrary-code-cve-2026-3286c90b2be...", "creation_timestamp": "2026-08-18T01:30:27.568519Z"}]}